Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File: iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier: POTL4t3RmF+E6+tRKT76eIiB9FdBh6GDsHzK4pW2KMc=
Subject key identifier: 08:BD:5C:25:A8:1E:42:33:D7:EF:11:D5:7F:6E:B8:A7:24:CB:E9:1C
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer: /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial: 019D394130EAA939B3E1EFDB235720A44F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number: 90
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: PB2kggUJySGnvbiqrC5T3ZKBXMwWjytkyhX80ieNfuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:30:ea:a9:39:b3:e1:ef:db:23:57:20:a4:4f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=08bd5c25a81e4233d7ef11d57f6eb8a724cbe91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:94:af:2a:a9:66:77:44:1f:89:ff:a8:9c:
83:e9:44:ea:3a:62:b4:39:5f:0c:5c:2d:82:de:7b:
2b:4c:52:96:6c:ed:7b:67:68:e4:c8:d5:79:38:da:
e4:90:4a:a5:6c:14:61:93:0e:c8:b5:bb:be:56:37:
f1:f0:2c:98:b3:21:7c:eb:24:f0:ab:26:30:be:e3:
47:c3:d6:ef:34:fb:06:75:e9:97:ab:c6:38:f4:43:
8f:8d:db:68:68:4e:aa:68:4f:f2:17:43:c8:5c:07:
ff:6c:6a:5e:26:d1:d5:24:c8:f3:3f:3a:c2:8d:f0:
d6:36:cb:80:0d:5c:36:39:a4:d4:83:97:30:88:b0:
b4:37:1c:88:1c:a3:68:64:3e:5d:8a:dd:f8:3b:fa:
2f:14:9f:52:20:87:7b:57:f2:3f:1b:85:33:87:65:
a4:01:1a:54:c8:f8:60:31:40:a4:34:0f:be:8b:1b:
c2:e6:eb:4a:2f:51:e2:71:3e:f5:21:76:a5:a9:71:
24:43:9b:9d:8f:a4:4b:c0:55:86:3e:45:59:7f:79:
ec:08:0e:9f:53:b6:49:aa:ff:48:18:ff:c2:24:87:
92:f3:ab:c2:cb:ed:7d:15:cd:9f:43:84:3c:fa:ee:
e8:65:8d:68:89:b3:e3:5b:84:db:64:56:8a:28:09:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:5C:25:A8:1E:42:33:D7:EF:11:D5:7F:6E:B8:A7:24:CB:E9:1C
X509v3 Authority Key Identifier:
keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:db:b8:b8:f6:ef:b6:7c:7c:c7:37:3d:97:81:e3:9a:79:50:
db:59:c0:b5:2d:44:39:6f:12:47:b0:c6:d3:26:95:33:1e:f3:
31:83:46:c3:ca:ac:03:4d:9f:fb:c5:7d:a9:83:b0:ae:d4:2d:
3a:8d:7f:70:e4:23:83:5d:c1:10:56:6d:2e:43:7c:43:b3:b7:
23:79:25:64:49:a9:75:1b:04:03:e1:71:cd:8e:f5:fa:bb:f4:
49:9d:f2:2e:b2:26:89:64:87:55:29:22:58:2c:7a:f3:10:58:
dd:82:d3:e2:0f:f3:b0:73:f7:5d:19:6d:2c:25:10:22:55:38:
dd:24:a4:c1:1f:98:04:d0:e5:0f:d4:11:8d:79:bd:10:f1:45:
71:20:fa:0e:39:74:68:07:f9:3b:75:0b:a5:1f:6e:2d:11:b4:
64:fc:d7:2d:67:2b:dc:61:51:97:3c:93:c7:60:e4:bc:36:ca:
4c:3f:7c:49:9e:fe:26:c2:66:09:2f:50:5f:5e:9c:72:1a:0c:
59:2f:71:fa:76:ac:9d:c2:87:99:9b:f2:02:d9:b9:93:4f:2c:
fa:27:cc:b1:5c:1b:d8:38:d2:35:45:ec:c8:1a:94:6b:f0:9b:
4d:46:77:c0:be:f8:51:86:f5:04:96:27:2e:84:0e:2b:06:73:
e2:c2:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:57 2026 by rpki-client